Add FIPS enabled scenario jobs

Add ML2/OVS and ML2/OVN tempest jobs with FIPS enabled.
Right now, the FIPS jobs run on Centos 8 stream.

For now those jobs are added to the experimental queue but
we should think about adding them to periodic maybe.

Co-Authored-By: Slawek Kaplonski <skaplons@redhat.com>

Depends-On: https://review.opendev.org/c/openstack/tempest/+/822560
Change-Id: I974c7d04d13a87bbbd4de6164578724a2cfd85cc

zuul.d/project.yaml

@@ -71,6 +71,12 @@
       jobs:
         - neutron-functional-with-uwsgi-fips
         - neutron-fullstack-with-uwsgi-fips
+        # NOTE(slaweq): those two FIPS jobs will fail until paramiko module will
+        # not be fixed to work properly with FIPS enabled. See
+        # https://review.opendev.org/c/openstack/tempest/+/810809
+        # for details
+        - neutron-ovs-tempest-fips
+        - neutron-ovn-tempest-ovs-release-fips
         - neutron-ovn-grenade-multinode
         - neutron-ovn-tempest-with-uwsgi-loki
         - neutron-ovn-tempest-full-multinode-ovs-master

zuul.d/tempest-singlenode.yaml

@@ -552,3 +552,37 @@
         '{{ devstack_base_dir }}/data/ovn': 'logs'
         '{{ devstack_log_dir }}/ovsdb-server-nb.log': 'logs'
         '{{ devstack_log_dir }}/ovsdb-server-sb.log': 'logs'
+
+- job:
+    name: neutron-ovs-tempest-fips
+    parent: neutron-ovs-tempest-base
+    nodeset: devstack-single-node-centos-8-stream
+    description: |
+      Scenario testing for a FIPS enabled Centos 8 system
+    pre-run: playbooks/enable-fips.yaml
+    vars:
+      configure_swap_size: 4096
+      devstack_services:
+        br-ex-tcpdump: true
+        br-int-flows: true
+      devstack_local_conf:
+        test-config:
+          "$TEMPEST_CONFIG":
+            validation:
+              ssh_key_type: 'ecdsa'
+
+
+- job:
+    name: neutron-ovn-tempest-ovs-release-fips
+    parent: neutron-ovn-tempest-ovs-release
+    nodeset: devstack-single-node-centos-8-stream
+    description: |
+      Scenario testing for a FIPS enabled Centos 8 system
+    pre-run: playbooks/enable-fips.yaml
+    vars:
+      configure_swap_size: 4096
+      devstack_local_conf:
+        test-config:
+          "$TEMPEST_CONFIG":
+            validation:
+              ssh_key_type: 'ecdsa'